{"id":2095,"date":"2022-10-24T03:40:13","date_gmt":"2022-10-24T03:40:13","guid":{"rendered":"https:\/\/sunucucozumleri.com\/?p=2095"},"modified":"2022-10-20T10:53:50","modified_gmt":"2022-10-20T10:53:50","slug":"freeipa-sunucusu-rhel-9a-nasil-kurulur","status":"publish","type":"post","link":"https:\/\/sunucucozumleri.com\/blog\/freeipa-sunucusu-rhel-9a-nasil-kurulur\/","title":{"rendered":"FreeIPA Sunucusu RHEL 9&#8217;a Nas\u0131l Kurulur?"},"content":{"rendered":"<p>Bu k\u0131lavuzda, ad\u0131m ad\u0131m FreeIPA sunucusunun RHEL 9&#8217;a nas\u0131l kurulaca\u011f\u0131n\u0131 g\u00f6sterece\u011fiz.<\/p>\n<p>RedHat sponsorlu\u011funda,\u00a0<a title=\"https:\/\/www.freeipa.org\/page\/About\" href=\"https:\/\/www.freeipa.org\/page\/About\" target=\"_blank\" rel=\"nofollow noopener\">FreeIPA<\/a>\u00a0, \u2013\u00a0Identity Policy Authentication\u00a0\u2013 \u00f6zellikle Linux\/Unix ortamlar\u0131 i\u00e7in tasarlanm\u0131\u015f \u00fccretsiz ve a\u00e7\u0131k kaynakl\u0131 bir kimlik ve Kimlik Do\u011frulama y\u00f6netimi \u00e7\u00f6z\u00fcm\u00fcd\u00fcr.\u00a0Windows i\u00e7in Active Directory ne ise, FreeIPA Linux i\u00e7in odur.<\/p>\n<p>FreeIPA, bir Linux ortam\u0131nda kullan\u0131c\u0131 hesaplar\u0131n\u0131n kimlik do\u011frulamas\u0131 ve yetkilendirilmesi i\u00e7in merkezi bir \u00e7\u00f6z\u00fcm sunar.\u00a0RedHat&#8217;\u0131n IdM&#8217;sinin (Identity Manager)\u00a0Yukar\u0131 Ak\u0131\u015f\u0131d\u0131r\u00a0ve a\u015fa\u011f\u0131daki a\u00e7\u0131k kaynak bile\u015fenlerinin \u00fczerine in\u015fa edilmi\u015ftir:<\/p>\n<ul>\n<li>NTP Sunucusu\u00a0\u2013 A\u011f Zaman Protokol\u00fc Sunucusu<\/li>\n<li>Apache HTTP Sunucusu\u00a0\u2013 FreeIPA&#8217;ya Web taray\u0131c\u0131s\u0131ndan eri\u015fmenize ve bunlar\u0131 y\u00f6netmenize izin veren bir web sunucusu.<\/li>\n<li>389 Dizin Sunucusu\u00a0\u2013 Bu, bir LDAP uygulamas\u0131d\u0131r ve tam bir \u00e7ok y\u00f6neticili LDAPv3 dizin altyap\u0131s\u0131 sa\u011flayan ana veri deposudur.<\/li>\n<li>Dogtag PKI Sertifika Yetkilisi\u00a0\u2013 CA sertifika y\u00f6netimi i\u015flevleri sa\u011flar.<\/li>\n<li>MIT Kerberos KDC\u00a0\u2013 Bu, Tek Oturum A\u00e7ma kimlik do\u011frulamas\u0131 i\u00e7in bir Kerberos veritaban\u0131 ve hizmeti sa\u011flar.<\/li>\n<li>I\u00a0SC Bind DNS sunucusu\u00a0\u2013 Alan Adlar\u0131n\u0131 y\u00f6netir<\/li>\n<li><a href=\"https:\/\/sunucucozumleri.com\/blog\/python-nedir\/\">Python<\/a> Y\u00f6netim \u00e7er\u00e7evesi<\/li>\n<\/ul>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_82_2 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Makale \u0130\u00e7eri\u011fi<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"\u0130\u00e7indekiler Tablosunu A\u00e7\/Kapat\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/sunucucozumleri.com\/blog\/freeipa-sunucusu-rhel-9a-nasil-kurulur\/#Onkosullar\" >\u00d6nko\u015fullar<\/a><\/li><\/ul><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/sunucucozumleri.com\/blog\/freeipa-sunucusu-rhel-9a-nasil-kurulur\/#Adim_1_Ana_bilgisayar_adini_yapilandirin_ve_etchosts_dosyasini_guncelleyin\" >Ad\u0131m 1) Ana bilgisayar ad\u0131n\u0131 yap\u0131land\u0131r\u0131n ve \/etc\/hosts dosyas\u0131n\u0131 g\u00fcncelleyin<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/sunucucozumleri.com\/blog\/freeipa-sunucusu-rhel-9a-nasil-kurulur\/#Adim_2_SELinuxu_yapilandirin\" >Ad\u0131m 2) SELinux&#8217;u yap\u0131land\u0131r\u0131n<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/sunucucozumleri.com\/blog\/freeipa-sunucusu-rhel-9a-nasil-kurulur\/#Adim_3_FreeIPA_Sunucusunu_RHEL_9a_kurun\" >Ad\u0131m 3) FreeIPA Sunucusunu RHEL 9&#8217;a kurun<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/sunucucozumleri.com\/blog\/freeipa-sunucusu-rhel-9a-nasil-kurulur\/#Adim_4_FreeIPA_Sunucusunu_Kurun\" >Ad\u0131m 4) FreeIPA Sunucusunu Kurun<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/sunucucozumleri.com\/blog\/freeipa-sunucusu-rhel-9a-nasil-kurulur\/#Adim_5_FreeIPA_icin_Guvenlik_Duvarini_Yapilandirin\" >Ad\u0131m 5) FreeIPA i\u00e7in G\u00fcvenlik Duvar\u0131n\u0131 Yap\u0131land\u0131r\u0131n<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/sunucucozumleri.com\/blog\/freeipa-sunucusu-rhel-9a-nasil-kurulur\/#Adim_6_FreeIPA_Sunucusuna_Erisim\" >Ad\u0131m 6) FreeIPA Sunucusuna Eri\u015fim<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/sunucucozumleri.com\/blog\/freeipa-sunucusu-rhel-9a-nasil-kurulur\/#FreeIPAyi_Komut_Satirinda_Kullanma\" >FreeIPA&#8217;y\u0131 Komut Sat\u0131r\u0131nda Kullanma<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/sunucucozumleri.com\/blog\/freeipa-sunucusu-rhel-9a-nasil-kurulur\/#FreeIPA_Sunucusunu_Kaldirin\" >FreeIPA Sunucusunu Kald\u0131r\u0131n<\/a><\/li><\/ul><\/nav><\/div>\n<h4><span class=\"ez-toc-section\" id=\"Onkosullar\"><\/span>\u00d6nko\u015fullar<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p>Ba\u015flamak i\u00e7in, dikkat etmeniz gereken \u00f6n ko\u015fullardan baz\u0131lar\u0131 \u015funlard\u0131r:<\/p>\n<ul>\n<li>RHEL 9 Server&#8217;\u0131n yeni kurulumu<\/li>\n<li>En az 4 GB RAM<\/li>\n<li>En az 2 vCPU<\/li>\n<li>Minimum 10 GB sabit disk alan\u0131.<\/li>\n<li>Red Hat Aboneli\u011fi veya yerel olarak yap\u0131land\u0131r\u0131lm\u0131\u015f yum deposu.<\/li>\n<li>Sunucunuzun Genel IP adresini g\u00f6steren bir FQDN (Tam Nitelikli Etki Alan\u0131 Ad\u0131).\u00a0Bu k\u0131lavuz i\u00e7in, sunucunun genel IP&#8217;si 74.207.228.169&#8217;a i\u015faret eden linuxtechwhiz.info adl\u0131 kay\u0131tl\u0131 bir etki alan\u0131 kullan\u0131yoruz.<\/li>\n<li>443 ve 80 numaral\u0131 ba\u011flant\u0131 noktalar\u0131 ba\u015fka bir uygulama taraf\u0131ndan kullan\u0131lmamal\u0131d\u0131r<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Adim_1_Ana_bilgisayar_adini_yapilandirin_ve_etchosts_dosyasini_guncelleyin\"><\/span>Ad\u0131m 1) Ana bilgisayar ad\u0131n\u0131 yap\u0131land\u0131r\u0131n ve \/etc\/hosts dosyas\u0131n\u0131 g\u00fcncelleyin<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Ba\u015flamak i\u00e7in sunucunuzun ana <a href=\"https:\/\/sunucucozumleri.com\/blog\/bilgisayar-nasil-kullanilir\/\">bilgisayar<\/a> ad\u0131n\u0131 FQDN&#8217;ye kar\u015f\u0131l\u0131k gelecek \u015fekilde yap\u0131land\u0131rman\u0131z gerekir.\u00a0Ana bilgisayar ad\u0131n\u0131 de\u011fi\u015ftirmek i\u00e7in a\u015fa\u011f\u0131daki s\u00f6zdizimini kullan\u0131n:<\/p>\n<p>$ sudo hostnamectl set-hostname sizin-ana bilgisayar ad\u0131n\u0131z<\/p>\n<p>Bizim durumumuzda, komut \u015f\u00f6yle olacakt\u0131r:<\/p>\n<pre>$ sudo hostnamectl set-hostname sunucucozumleri.com<\/pre>\n<p>Ana bilgisayar ad\u0131 de\u011fi\u015fikli\u011fini onaylamak i\u00e7in \u015fu komutu \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n<pre>$ hostname<\/pre>\n<p>Ard\u0131ndan, \/etc\/hosts dosyas\u0131na eri\u015fin.<\/p>\n<pre>$ sudo vim \/etc\/hosts<\/pre>\n<p>FQDN&#8217;niz i\u00e7in g\u00f6sterildi\u011fi gibi bir giri\u015f ekleyin<\/p>\n<p>sunucu-kamu-ip fqdn.example.com<\/p>\n<p>Bizim durumumuzda, bu olacak:<\/p>\n<pre>127.0.0.1\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 sunucucozumleri.com<\/pre>\n<p>De\u011fi\u015fiklikleri kaydedin ve \u00e7\u0131k\u0131n.<\/p>\n<p>Ard\u0131ndan, ana bilgisayar ad\u0131 olarak da yap\u0131land\u0131r\u0131lan kay\u0131tl\u0131 etki alan\u0131n\u0131n, sunucunun genel IP&#8217;sine \u00e7\u00f6z\u00fcmlendi\u011fini onaylay\u0131n.\u00a0Bunu alan ad\u0131na ping atarak yapabilirsiniz.<\/p>\n<pre>$ ping -c 4 sunucucozumleri.com\r\n\r\n<img decoding=\"async\" class=\"alignnone size-full wp-image-2096\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur.webp\" alt=\"\" width=\"742\" height=\"260\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur.webp 742w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur-300x105.webp 300w\" sizes=\"(max-width: 742px) 100vw, 742px\" \/><\/pre>\n<h2><span class=\"ez-toc-section\" id=\"Adim_2_SELinuxu_yapilandirin\"><\/span>Ad\u0131m 2) SELinux&#8217;u yap\u0131land\u0131r\u0131n<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Ard\u0131ndan, bir taray\u0131c\u0131dan FreeIPA sunucusuna eri\u015fmek i\u00e7in SELinux&#8217;u yap\u0131land\u0131rman\u0131z gerekir.\u00a0Burada SELinux&#8217;u &#8216;\u00a0permissive\u00a0&#8216; moduna ayarlayaca\u011f\u0131z.<\/p>\n<p>Bunu yapmak i\u00e7in a\u015fa\u011f\u0131daki komutlar\u0131 \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n<pre>$ sudo setenforce 0\r\n$ sudo sed -i 's\/^SELINUX=.*\/SELINUX=permissive\/g' \/etc\/selinux\/config<\/pre>\n<p>SELinux durumundaki de\u011fi\u015fikli\u011fi onaylamak i\u00e7in \u015fu komutu \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n<pre>$ sestatus<\/pre>\n<pre><img decoding=\"async\" class=\"alignnone size-full wp-image-2097\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur1.webp\" alt=\"\" width=\"753\" height=\"274\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur1.webp 753w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur1-300x109.webp 300w\" sizes=\"(max-width: 753px) 100vw, 753px\" \/> \r\nArd\u0131ndan, de\u011fi\u015fikliklerin y\u00fcr\u00fcrl\u00fc\u011fe girmesi i\u00e7in sistemi yeniden ba\u015flat\u0131n.<\/pre>\n<pre>$ sudo <a href=\"https:\/\/sunucucozumleri.com\/blog\/reboot-ne-demek\/\">reboot<\/a><\/pre>\n<h2><span class=\"ez-toc-section\" id=\"Adim_3_FreeIPA_Sunucusunu_RHEL_9a_kurun\"><\/span><span id=\"Step_3_Install_FreeIPA_Server_on_RHEL_9\" class=\"ez-toc-section\"><\/span>Ad\u0131m 3) FreeIPA Sunucusunu RHEL 9&#8217;a kurun<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>FreeIPA sunucusunu sisteminize kurmak i\u00e7in \u015fu komutu \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n<pre>$ sudo dnf install freeipa-server -y<\/pre>\n<p>Bu, bir dizi FreeIPA paketi ve bir dizi ba\u015fka ek paket kurar.<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-2098\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur2.webp\" alt=\"\" width=\"780\" height=\"215\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur2.webp 780w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur2-300x83.webp 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur2-768x212.webp 768w\" sizes=\"(max-width: 780px) 100vw, 780px\" \/><\/p>\n<p>FreeIPA DNS Sunucusunu kurmak istiyorsan\u0131z, devam edin ve g\u00f6sterildi\u011fi gibi DNS paketlerini kurun.<\/p>\n<pre>$ sudo dnf install ipa-server-dns bind-dyndb-ldap -y<\/pre>\n<pre><img decoding=\"async\" class=\"alignnone size-full wp-image-2099\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur3.webp\" alt=\"\" width=\"780\" height=\"203\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur3.webp 780w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur3-300x78.webp 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur3-768x200.webp 768w\" sizes=\"(max-width: 780px) 100vw, 780px\" \/><\/pre>\n<h2><span class=\"ez-toc-section\" id=\"Adim_4_FreeIPA_Sunucusunu_Kurun\"><\/span>Ad\u0131m 4) FreeIPA Sunucusunu Kurun<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>FreeIPA Sunucusunun kurulumu, FreeIPA sunucusunun \u00e7e\u015fitli bile\u015fenlerinin konfig\u00fcrasyonunu otomatikle\u015ftiren basit bir komut dosyas\u0131 kullan\u0131larak basitle\u015ftirilmi\u015ftir.<\/p>\n<p><a href=\"https:\/\/sunucucozumleri.com\/blog\/frontpage\/\">Sunucu<\/a> kurulumuna ba\u015flamak i\u00e7in a\u015fa\u011f\u0131daki beti\u011fi \u00e7al\u0131\u015ft\u0131r\u0131n,<\/p>\n<pre>$ sudo ipa-server-install<\/pre>\n<p>Komut dosyas\u0131, bir dizi istemde size yol g\u00f6sterir.\u00a0\u0130lk istem, entegre BIND DNS&#8217;yi kurman\u0131z\u0131 gerektirecektir.\u00a0Varsay\u0131lan olarak, ENTER&#8217;a basmak varsay\u0131lan se\u00e7imi se\u00e7er.\u00a0Bu k\u0131lavuzda, BIND DNS se\u00e7ene\u011fini kullanmay\u0131 atlayaca\u011f\u0131z.<\/p>\n<p>Ard\u0131ndan, sunucu ana bilgisayar ad\u0131n\u0131 ve etki alan\u0131 ad\u0131n\u0131 yap\u0131land\u0131r\u0131n.<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-2100\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur4.webp\" alt=\"\" width=\"780\" height=\"498\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur4.webp 780w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur4-300x192.webp 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur4-768x490.webp 768w\" sizes=\"(max-width: 780px) 100vw, 780px\" \/><\/p>\n<p>Ard\u0131ndan b\u00f6lge ad\u0131n\u0131 ve Dizin Y\u00f6neticisi Parolas\u0131n\u0131 sa\u011flay\u0131n ve ard\u0131ndan IPA sunucusu y\u00f6neticisi i\u00e7in parolay\u0131 belirleyin.<\/p>\n<pre><img decoding=\"async\" class=\"alignnone size-full wp-image-2101\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur5.webp\" alt=\"\" width=\"714\" height=\"431\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur5.webp 714w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur5-300x181.webp 300w\" sizes=\"(max-width: 714px) 100vw, 714px\" \/><\/pre>\n<p>Ard\u0131ndan, NetBIOS ad\u0131n\u0131 sa\u011flay\u0131n.\u00a0Chrony&#8217;yi NTP Sunucusu ile yap\u0131land\u0131r\u0131p yap\u0131land\u0131rmamay\u0131 se\u00e7ebilirsiniz.\u00a0Bu tamamen size kalm\u0131\u015f ve bizim durumumuzda Chrony&#8217;yi yap\u0131land\u0131rmamay\u0131 se\u00e7tik.<\/p>\n<p>K\u0131sa bir s\u00fcre sonra, IPA Master&#8217;\u0131n ayr\u0131nt\u0131lar\u0131 g\u00f6r\u00fcnt\u00fclenecektir.\u00a0Sistemi yap\u0131land\u0131rmaya devam etmek i\u00e7in &#8216;\u00a0Evet\u00a0&#8216; yaz\u0131n<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-2102\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur6.webp\" alt=\"\" width=\"737\" height=\"383\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur6.webp 737w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur6-300x156.webp 300w\" sizes=\"(max-width: 737px) 100vw, 737px\" \/><\/p>\n<p>Bundan sonra, komut dosyas\u0131 a\u015fa\u011f\u0131daki g\u00f6revleri ger\u00e7ekle\u015ftirmeye devam edecektir.<\/p>\n<ul>\n<li>Sertifika y\u00f6netimi i\u00e7in ba\u011f\u0131ms\u0131z bir CA (dogtag) yap\u0131land\u0131r\u0131n<\/li>\n<li>Kerberos Anahtar Da\u011f\u0131t\u0131m Merkezi (KDC) olu\u015fturun ve yap\u0131land\u0131r\u0131n<\/li>\n<li>Bir Dizin Sunucusu \u00f6rne\u011fi olu\u015fturun ve yap\u0131land\u0131r\u0131n<\/li>\n<li>Apache&#8217;yi yap\u0131land\u0131r\u0131n (httpd)<\/li>\n<li>PKINIT&#8217;i etkinle\u015ftirmek i\u00e7in KDC&#8217;yi yap\u0131land\u0131r\u0131n<\/li>\n<\/ul>\n<p>IPA sunucusunun yap\u0131land\u0131rmas\u0131 sonunda, a\u00e7man\u0131z gereken portlar\u0131 veya hizmetleri ve sunucunun yap\u0131land\u0131rma ve kurulumunun ba\u015far\u0131l\u0131 oldu\u011funu g\u00f6steren a\u015fa\u011f\u0131daki \u00e7\u0131kt\u0131y\u0131 alacaks\u0131n\u0131z.<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-2103\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur7.webp\" alt=\"\" width=\"780\" height=\"573\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur7.webp 780w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur7-300x220.webp 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur7-768x564.webp 768w\" sizes=\"(max-width: 780px) 100vw, 780px\" \/><\/p>\n<h2><span class=\"ez-toc-section\" id=\"Adim_5_FreeIPA_icin_Guvenlik_Duvarini_Yapilandirin\"><\/span>Ad\u0131m 5) FreeIPA i\u00e7in G\u00fcvenlik Duvar\u0131n\u0131 Yap\u0131land\u0131r\u0131n<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Bu noktada, FreeIPA Sunucusu ba\u015far\u0131yla kuruldu.\u00a0Ancak, g\u00fcvenlik duvar\u0131nda birka\u00e7 \u00f6nemli hizmete izin vermeniz gerekir.\u00a0Bunlar, \u015fu anda sunucu taraf\u0131ndan kullan\u0131lan hizmetlerdir.<\/p>\n<p>Bu nedenle, a\u015fa\u011f\u0131daki komutu \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n<pre>$ sudo firewall-cmd --add-service={http,https,dns,ntp,freeipa-ldap,freeipa-ldaps} --permanent\r\n$ sudo firewall-cmd --reload<\/pre>\n<h2><span class=\"ez-toc-section\" id=\"Adim_6_FreeIPA_Sunucusuna_Erisim\"><\/span>Ad\u0131m 6) FreeIPA Sunucusuna Eri\u015fim<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Son olarak, a\u015fa\u011f\u0131daki gibi bir taray\u0131c\u0131da FQDN&#8217;nize g\u00f6z atarak WebUI&#8217;ye eri\u015febilirsiniz.<\/p>\n<p>https:\/\/sunucucozumleri.com<\/p>\n<p>Ba\u015flang\u0131\u00e7ta taray\u0131c\u0131n\u0131zda bir uyar\u0131 ile kar\u015f\u0131la\u015facaks\u0131n\u0131z. Bunun nedeni, FreeIPA kurulumu s\u0131ras\u0131nda sunucunuz i\u00e7in kendinden imzal\u0131 bir sertifikan\u0131n olu\u015fturulmas\u0131 ve bir Sertifika Yetkilisi taraf\u0131ndan tan\u0131nmamas\u0131d\u0131r.<\/p>\n<p>Bu engeli atlamak i\u00e7in &#8216;\u00a0Geli\u015fmi\u015f\u00a0&#8216;i t\u0131klay\u0131n.<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-2104\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur8.webp\" alt=\"\" width=\"780\" height=\"420\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur8.webp 780w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur8-300x162.webp 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur8-768x414.webp 768w\" sizes=\"(max-width: 780px) 100vw, 780px\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>Ard\u0131ndan &#8216;\u00a0Alan ad\u0131na ilerle&#8217;yi\u00a0t\u0131klay\u0131n .<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-2105\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur9.png\" alt=\"\" width=\"780\" height=\"160\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur9.png 780w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur9-300x62.png 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur9-768x158.png 768w\" sizes=\"(max-width: 780px) 100vw, 780px\" \/><\/p>\n<p>Taray\u0131c\u0131n\u0131zda, 4. Ad\u0131mda olu\u015fturdu\u011funuz y\u00f6netici kullan\u0131c\u0131 ad\u0131 ve \u015fifresiyle kimlik do\u011frulamas\u0131 yap\u0131n.<\/p>\n<p>Bu, g\u00f6sterildi\u011fi gibi kontrol paneline eri\u015fmenizi sa\u011flar.<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-2106\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur10.webp\" alt=\"\" width=\"780\" height=\"192\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur10.webp 780w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur10-300x74.webp 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur10-768x189.webp 768w\" sizes=\"(max-width: 780px) 100vw, 780px\" \/><\/p>\n<h2><span class=\"ez-toc-section\" id=\"FreeIPAyi_Komut_Satirinda_Kullanma\"><\/span>FreeIPA&#8217;y\u0131 Komut Sat\u0131r\u0131nda Kullanma<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>FreeIPA kurulumu, sunucuyla etkile\u015fime girmenizi sa\u011flayan bir komut sat\u0131r\u0131 istemcisi sa\u011flar.\u00a0CLI&#8217;yi kullanmaya ba\u015flamadan \u00f6nce, \u00f6nce bir Kerberos bileti olu\u015fturman\u0131z gerekir.<\/p>\n<p>Bir Kerberos bileti olu\u015fturmak i\u00e7in \u015fu komutu \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n<pre>$ sudo kinit admin<\/pre>\n<pre><img decoding=\"async\" class=\"alignnone size-full wp-image-2107\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur11.webp\" alt=\"\" width=\"780\" height=\"120\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur11.webp 780w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur11-300x46.webp 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur11-768x118.webp 768w\" sizes=\"(max-width: 780px) 100vw, 780px\" \/><\/pre>\n<p>Biletin sona erme bilgilerini g\u00f6sterildi\u011fi gibi kontrol edebilirsiniz.<\/p>\n<pre>$ sudo klist<\/pre>\n<pre><img decoding=\"async\" class=\"alignnone size-full wp-image-2108\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur12.webp\" alt=\"\" width=\"780\" height=\"147\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur12.webp 780w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur12-300x57.webp 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur12-768x145.webp 768w\" sizes=\"(max-width: 780px) 100vw, 780px\" \/><\/pre>\n<p>Ek olarak, y\u00f6netici kullan\u0131c\u0131n\u0131n varsay\u0131lan kabu\u011funu g\u00f6sterildi\u011fi gibi\u00a0\/bin\/bash\u00a0olarak ayarlayabilirsiniz.<\/p>\n<pre>$ sudo ipa config-mod --defaultshell=\/bin\/bash<\/pre>\n<pre><img decoding=\"async\" class=\"alignnone size-full wp-image-2109\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur13.webp\" alt=\"\" width=\"780\" height=\"287\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur13.webp 780w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur13-300x110.webp 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur13-768x283.webp 768w\" sizes=\"(max-width: 780px) 100vw, 780px\" \/><\/pre>\n<p>Ayr\u0131ca, oturum a\u00e7arken y\u00f6netici kullan\u0131c\u0131n\u0131n ana dizininin olu\u015fturulmas\u0131n\u0131 etkinle\u015ftirebilirsiniz.<\/p>\n<pre>$ sudo authconfig --enablemkhomedir --update<\/pre>\n<pre><img decoding=\"async\" class=\"alignnone size-full wp-image-2110\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur14.webp\" alt=\"\" width=\"780\" height=\"192\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur14.webp 780w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur14-300x74.webp 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur14-768x189.webp 768w\" sizes=\"(max-width: 780px) 100vw, 780px\" \/><\/pre>\n<p>Art\u0131k SSH kullanarak y\u00f6netici kullan\u0131c\u0131 olarak oturum a\u00e7may\u0131 deneyebilirsiniz<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-2111\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur15.webp\" alt=\"\" width=\"780\" height=\"178\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur15.webp 780w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur15-300x68.webp 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur15-768x175.webp 768w\" sizes=\"(max-width: 780px) 100vw, 780px\" \/><\/p>\n<p>Ayr\u0131ca a\u015fa\u011f\u0131daki komutu kullanarak yeni bir kullan\u0131c\u0131 hesab\u0131 olu\u015fturabilirsiniz.\u00a0Komut, s\u0131ras\u0131yla ad\u0131 ve soyad\u0131 Test ve Kullan\u0131c\u0131 olmak \u00fczere linuxtechi ad\u0131nda yeni bir kullan\u0131c\u0131 olu\u015fturur.<\/p>\n<pre>$ sudo ipa kullan\u0131c\u0131 ekle linuxtechi \\\r\n\u00a0 --first=Test --last=Kullan\u0131c\u0131 \\\r\n\u00a0 --email=test@example.com --parola\r\n\r\n<img decoding=\"async\" class=\"alignnone size-full wp-image-2112\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur16.webp\" alt=\"\" width=\"780\" height=\"497\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur16.webp 780w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur16-300x191.webp 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur16-768x489.webp 768w\" sizes=\"(max-width: 780px) 100vw, 780px\" \/><\/pre>\n<p>FreeIPA sunucusunda olu\u015fturulan t\u00fcm kullan\u0131c\u0131lar\u0131 listelemek i\u00e7in \u015fu komutu \u00e7al\u0131\u015ft\u0131r\u0131n:<\/p>\n<p>$ sudo ipa kullan\u0131c\u0131 bulma<\/p>\n<p>&nbsp;<br \/>\n<\/ins><\/span><\/span><\/p>\n<p>\u00c7\u0131kt\u0131dan iki kullan\u0131c\u0131n\u0131n olu\u015fturuldu\u011funu g\u00f6rebilirsiniz \u2013 kurulum i\u015flemi s\u0131ras\u0131nda olu\u015fturulan admin kullan\u0131c\u0131 ve yeni olu\u015fturdu\u011fumuz linuxtechi.<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-2113\" src=\"https:\/\/sunucucozumleri.com\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur17.webp\" alt=\"\" width=\"780\" height=\"552\" title=\"\" srcset=\"\/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur17.webp 780w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur17-300x212.webp 300w, \/\/sunucucozumleri.com\/blog\/wp-content\/uploads\/2022\/10\/FreeIPA-Sunucusu-RHEL-9a-Nasil-Kurulur17-768x544.webp 768w\" sizes=\"(max-width: 780px) 100vw, 780px\" \/><\/p>\n<h2><span class=\"ez-toc-section\" id=\"FreeIPA_Sunucusunu_Kaldirin\"><\/span>FreeIPA Sunucusunu Kald\u0131r\u0131n<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>FreeIPA sunucusuna art\u0131k ihtiyac\u0131n\u0131z yoksa, g\u00f6sterildi\u011fi gibi kald\u0131rabilirsiniz.<\/p>\n<pre>$ sudo ipa-server-install --uninstall<\/pre>\n","protected":false},"excerpt":{"rendered":"<p>Bu k\u0131lavuzda, ad\u0131m ad\u0131m FreeIPA sunucusunun RHEL 9&#8217;a nas\u0131l kurulaca\u011f\u0131n\u0131 g\u00f6sterece\u011fiz. RedHat sponsorlu\u011funda,\u00a0FreeIPA\u00a0, \u2013\u00a0Identity Policy Authentication\u00a0\u2013 \u00f6zellikle Linux\/Unix ortamlar\u0131 i\u00e7in tasarlanm\u0131\u015f \u00fccretsiz ve a\u00e7\u0131k kaynakl\u0131 bir kimlik ve Kimlik Do\u011frulama y\u00f6netimi \u00e7\u00f6z\u00fcm\u00fcd\u00fcr.\u00a0Windows i\u00e7in Active Directory ne ise, FreeIPA Linux i\u00e7in odur. FreeIPA, bir Linux ortam\u0131nda kullan\u0131c\u0131 hesaplar\u0131n\u0131n kimlik do\u011frulamas\u0131 ve yetkilendirilmesi i\u00e7in merkezi bir \u00e7\u00f6z\u00fcm &hellip;<\/p>\n","protected":false},"author":1,"featured_media":2104,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[5],"tags":[],"class_list":["post-2095","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-linux"],"acf":[],"_links":{"self":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/posts\/2095","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/comments?post=2095"}],"version-history":[{"count":0,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/posts\/2095\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/media\/2104"}],"wp:attachment":[{"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/media?parent=2095"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/categories?post=2095"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/sunucucozumleri.com\/blog\/wp-json\/wp\/v2\/tags?post=2095"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}